Hi, sorry to ask simple question, since i am newbie in ldap. I am trying to setup ldap replication provider and consumer, i am using RHEL 6 with openldap-2.4.23-26.el6.x86_64. The problem is the data is not being synchronozing. i am using cn=config. here is the config of provider.
[root@hmslogbnc3 slapd.d]# more cn=config.ldif dn: cn=config objectClass: olcGlobal cn: config olcConfigFile: /etc/openldap/schema/schema_convert.conf olcConfigDir: /etc/openldap/slapd.d olcArgsFile: /var/run/openldap/slapd.args olcAttributeOptions: lang- olcAuthzPolicy: none olcConcurrency: 0 olcConnMaxPending: 100 olcConnMaxPendingAuth: 1000 olcGentleHUP: FALSE olcIdleTimeout: 0 olcIndexSubstrIfMaxLen: 4 olcIndexSubstrIfMinLen: 2 olcIndexSubstrAnyLen: 4 olcIndexSubstrAnyStep: 2 olcIndexIntLen: 4 olcLocalSSF: 71 olcPidFile: /var/run/openldap/slapd.pid olcReadOnly: FALSE olcReverseLookup: FALSE olcSaslSecProps: noplain,noanonymous olcSizeLimit: unlimited olcSockbufMaxIncoming: 262143 olcSockbufMaxIncomingAuth: 16777215 olcThreads: 16 olcTLSVerifyClient: never olcToolThreads: 1 olcWriteTimeout: 0 structuralObjectClass: olcGlobal entryUUID: e683e806-2680-1032-8d81-bf9693325536 creatorsName: cn=config createTimestamp: 20130321143937Z entryCSN: 20130321143937.560581Z#000000#000#000000 modifiersName: cn=config modifyTimestamp: 20130321143937Z
[root@hmslogbnc3 cn=config]# more olcDatabase={1}bdb.ldif dn: olcDatabase={1}bdb objectClass: olcDatabaseConfig objectClass: olcBdbConfig olcDatabase: {1}bdb olcSuffix: dc=secure-mail,dc=belgacom olcAccess: {0}to attrs=userPassword by dn.base="cn=admin,dc=secure-mail,dc=be lgacom" write by dn.children="ou=administrators,dc=secure-mail,dc=belgacom" write by anonymous auth olcAccess: {1}to * by dn.base="cn=admin,dc=secure-mail,dc=belgacom" write by dn.base="cn=replica,dc=secure-mail,dc=belgacom" write by dn.children="ou=ad ministrators,dc=secure-mail,dc=belgacom" write by users read by anonymous r ead olcAddContentAcl: FALSE olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootDN: cn=admin,dc=secure-mail,dc=belgacom olcRootPW:: ***** olcSyncUseSubentry: FALSE olcMonitoring: TRUE olcDbDirectory: /openldap olcDbCacheSize: 20000 olcDbNoSync: FALSE olcDbDirtyRead: FALSE olcDbIDLcacheSize: 20000 olcDbIndex: objectClass eq olcDbIndex: entryUUID eq olcDbIndex: entryCSN eq olcDbIndex: srcIP eq,approx,sub olcDbIndex: finalDestination eq,sub olcDbIndex: policy eq olcDbIndex: customerId eq olcDbIndex: dc eq,approx,sub olcDbLinearIndex: FALSE olcDbMode: 0600 olcDbSearchStack: 16 olcDbShmKey: 0 olcDbCacheFree: 1 olcDbDNcacheSize: 0 structuralObjectClass: olcBdbConfig entryUUID: e68469de-2680-1032-8d8d-bf9693325536 creatorsName: cn=config createTimestamp: 20130321143937Z entryCSN: 20130321143937.560581Z#000000#000#000000 modifiersName: cn=config modifyTimestamp: 20130321143937Z [root@hmslogbnc3 cn=config]#
[root@hmslogbnc3 cn=config]# more cn=module{0}.ldif dn: cn=module{0} objectClass: olcModuleList cn: module{0} olcModulePath: /usr/lib64/openldap olcModuleLoad: {0}syncprov.la structuralObjectClass: olcModuleList entryUUID: e683edd8-2680-1032-8d82-bf9693325536 creatorsName: cn=config createTimestamp: 20130321143937Z entryCSN: 20130321143937.560581Z#000000#000#000000 modifiersName: cn=config modifyTimestamp: 20130321143937Z
When i tried to start the consumer server i am getting the log
daemon: activity on 1 descriptor daemon: listen=7, new connection on 12 daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL daemon: added 12r (active) listener=(nil) daemon: activity on 2 descriptors daemon: activity on: 12r daemon: read active on 12 conn=1000 fd=12 ACCEPT from IP=10.48.12.42:33557 (IP=0.0.0.0:389) daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(12) connection_get(12): got connid=1000 connection_read(12): checking for input on id=1000 ber_get_next ldap_read: want=8, got=8 0000: 30 38 02 01 01 60 33 02 08...`3. ldap_read: want=50, got=50 0000: 01 03 04 25 63 6e 3d 72 65 70 6c 69 63 61 2c 64 ...%cn=replica,d 0010: 63 3d 73 65 63 75 72 65 2d 6d 61 69 6c 2c 64 63 c=secure-mail,dc 0020: 3d 62 65 6c 67 61 63 6f 6d 80 07 72 33 70 6c 69 =belgacom..r3pli 0030: 63 61 ca ber_get_next: tag 0x30 len 56 contents: ber_dump: buf=0x7fc7f4002660 ptr=0x7fc7f4002660 end=0x7fc7f4002698 len=56 0000: 02 01 01 60 33 02 01 03 04 25 63 6e 3d 72 65 70 ...`3....%cn=rep 0010: 6c 69 63 61 2c 64 63 3d 73 65 63 75 72 65 2d 6d lica,dc=secure-m 0020: 61 69 6c 2c 64 63 3d 62 65 6c 67 61 63 6f 6d 80 ail,dc=belgacom. 0030: 07 72 33 70 6c 69 63 61 .r3plica op tag 0x60, time 1364215962 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable daemon: activity on 1 descriptor daemon: activity on: conn=1000 op=0 do_bind daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL ber_scanf fmt ({imt) ber: ber_dump: buf=0x7fc7f4002660 ptr=0x7fc7f4002663 end=0x7fc7f4002698 len=53 0000: 60 33 02 01 03 04 25 63 6e 3d 72 65 70 6c 69 63 `3....%cn=replic 0010: 61 2c 64 63 3d 73 65 63 75 72 65 2d 6d 61 69 6c a,dc=secure-mail 0020: 2c 64 63 3d 62 65 6c 67 61 63 6f 6d 80 07 72 33 ,dc=belgacom..r3 0030: 70 6c 69 63 61 plica ber_scanf fmt (m}) ber: ber_dump: buf=0x7fc7f4002660 ptr=0x7fc7f400268f end=0x7fc7f4002698 len=9 0000: 00 07 72 33 70 6c 69 63 61 ..r3plica
dnPrettyNormal: <cn=replica,dc=secure-mail,dc=belgacom>
=> ldap_bv2dn(cn=replica,dc=secure-mail,dc=belgacom,0) <= ldap_bv2dn(cn=replica,dc=secure-mail,dc=belgacom)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=replica,dc=secure-mail,dc=belgacom)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=replica,dc=secure-mail,dc=belgacom)=0 <<< dnPrettyNormal: <cn=replica,dc=secure-mail,dc=belgacom>, <cn=replica,dc=secure-mail,dc=belgacom> conn=1000 op=0 BIND dn="cn=replica,dc=secure-mail,dc=belgacom" method=128 do_bind: version=3 dn="cn=replica,dc=secure-mail,dc=belgacom" method=128 ==> bdb_bind: dn: cn=replica,dc=secure-mail,dc=belgacom bdb_dn2entry("cn=replica,dc=secure-mail,dc=belgacom") => bdb_dn2id("cn=replica,dc=secure-mail,dc=belgacom") <= bdb_dn2id: got id=0x4b7 entry_decode: "cn=replica,dc=secure-mail,dc=belgacom" <= entry_decode(cn=replica,dc=secure-mail,dc=belgacom) => access_allowed: result not in cache (userPassword) => access_allowed: auth access to "cn=replica,dc=secure-mail,dc=belgacom" "userPassword" requested => acl_get: [1] attr userPassword => acl_mask: access to entry "cn=replica,dc=secure-mail,dc=belgacom", attr "userPassword" requested => acl_mask: to value by "", (=0) <= check a_dn_pat: cn=admin,dc=secure-mail,dc=belgacom <= check a_dn_pat: ou=administrators,dc=secure-mail,dc=belgacom <= check a_dn_pat: anonymous <= acl_mask: [3] applying auth(=xd) (stop) <= acl_mask: [3] mask: auth(=xd) => slap_access_allowed: auth access granted by auth(=xd) => access_allowed: auth access granted by auth(=xd) conn=1000 op=0 BIND dn="cn=replica,dc=secure-mail,dc=belgacom" mech=SIMPLE ssf=0 do_bind: v3 bind: "cn=replica,dc=secure-mail,dc=belgacom" to "cn=replica,dc=secure-mail,dc=belgacom" send_ldap_result: conn=1000 op=0 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=1 tag=97 err=0 ber_flush2: 14 bytes to sd 12 0000: 30 0c 02 01 01 61 07 0a 01 00 04 00 04 00 0....a........ ldap_write: want=14, written=14 0000: 30 0c 02 01 01 61 07 0a 01 00 04 00 04 00 0....a........ conn=1000 op=0 RESULT tag=97 err=0 text= daemon: activity on 1 descriptor daemon: activity on: 12r daemon: read active on 12 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(12) connection_get(12): got connid=1000 connection_read(12): checking for input on id=1000 ber_get_next ldap_read: want=8, got=8 0000: 30 81 c1 02 01 02 63 40 0.....c@
ldap_read: want=188, got=188 0000: 04 1a 64 63 3d 73 65 63 75 72 65 2d 6d 61 69 6c ..dc=secure-mail 0010: 2c 64 63 3d 62 65 6c 67 61 63 6f 6d 0a 01 00 0a ,dc=belgacom.... 0020: 01 00 02 01 00 02 01 00 01 01 00 87 0b 6f 62 6a .............obj 0030: 65 63 74 63 6c 61 73 73 30 06 04 01 2a 04 01 2b ectclass0...*..+ 0040: a0 7a 30 5a 04 18 31 2e 33 2e 36 2e 31 2e 34 2e .z0Z..1.3.6.1.4. 0050: 31 2e 34 32 30 33 2e 31 2e 39 2e 31 2e 31 04 3e 1.4203.1.9.1.1.> 0060: 30 3c 0a 01 03 04 34 72 69 64 3d 31 30 30 2c 63 0<....4rid=100,c 0070: 73 6e 3d 32 30 31 33 30 33 32 32 31 34 35 39 30 sn=2013032214590 0080: 33 2e 38 31 36 30 39 36 5a 23 30 30 30 30 30 30 3.816096Z#000000 0090: 23 30 30 30 23 30 30 30 30 30 30 01 01 ff 30 1c #000#000000...0. 00a0: 04 17 32 2e 31 36 2e 38 34 30 2e 31 2e 31 31 33 ..2.16.840.1.113 00b0: 37 33 30 2e 33 2e 34 2e 32 01 01 ff 730.3.4.2... ber_get_next: tag 0x30 len 193 contents: ber_dump: buf=0x7fc7f80008c0 ptr=0x7fc7f80008c0 end=0x7fc7f8000981 len=193 0000: 02 01 02 63 40 04 1a 64 63 3d 73 65 63 75 72 65 ...c@..dc=secure
0010: 2d 6d 61 69 6c 2c 64 63 3d 62 65 6c 67 61 63 6f -mail,dc=belgaco 0020: 6d 0a 01 00 0a 01 00 02 01 00 02 01 00 01 01 00 m............... 0030: 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 30 06 04 ..objectclass0.. 0040: 01 2a 04 01 2b a0 7a 30 5a 04 18 31 2e 33 2e 36 .*..+.z0Z..1.3.6 0050: 2e 31 2e 34 2e 31 2e 34 32 30 33 2e 31 2e 39 2e .1.4.1.4203.1.9. 0060: 31 2e 31 04 3e 30 3c 0a 01 03 04 34 72 69 64 3d 1.1.>0<....4rid= 0070: 31 30 30 2c 63 73 6e 3d 32 30 31 33 30 33 32 32 100,csn=20130322 0080: 31 34 35 39 30 33 2e 38 31 36 30 39 36 5a 23 30 145903.816096Z#0 0090: 30 30 30 30 30 23 30 30 30 23 30 30 30 30 30 30 00000#000#000000 00a0: 01 01 ff 30 1c 04 17 32 2e 31 36 2e 38 34 30 2e ...0...2.16.840. 00b0: 31 2e 31 31 33 37 33 30 2e 33 2e 34 2e 32 01 01 1.113730.3.4.2.. 00c0: ff . op tag 0x63, time 1364215962 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable daemon: activity on 1 descriptor conn=1000 op=1 do_search ber_scanf fmt ({miiiib) ber: ber_dump: buf=0x7fc7f80008c0 ptr=0x7fc7f80008c3 end=0x7fc7f8000981 len=190 0000: 63 40 04 1a 64 63 3d 73 65 63 75 72 65 2d 6d 61 c@..dc=secure-ma
0010: 69 6c 2c 64 63 3d 62 65 6c 67 61 63 6f 6d 0a 01 il,dc=belgacom.. 0020: 00 0a 01 00 02 01 00 02 01 00 01 01 00 87 0b 6f ...............o 0030: 62 6a 65 63 74 63 6c 61 73 73 30 06 04 01 2a 04 bjectclass0...*. 0040: 01 2b a0 7a 30 5a 04 18 31 2e 33 2e 36 2e 31 2e .+.z0Z..1.3.6.1. 0050: 34 2e 31 2e 34 32 30 33 2e 31 2e 39 2e 31 2e 31 4.1.4203.1.9.1.1 0060: 04 3e 30 3c 0a 01 03 04 34 72 69 64 3d 31 30 30 .>0<....4rid=100 0070: 2c 63 73 6e 3d 32 30 31 33 30 33 32 32 31 34 35 ,csn=20130322145 0080: 39 30 33 2e 38 31 36 30 39 36 5a 23 30 30 30 30 903.816096Z#0000 0090: 30 30 23 30 30 30 23 30 30 30 30 30 30 01 01 ff 00#000#000000... 00a0: 30 1c 04 17 32 2e 31 36 2e 38 34 30 2e 31 2e 31 0...2.16.840.1.1 00b0: 31 33 37 33 30 2e 33 2e 34 2e 32 01 01 ff 13730.3.4.2...
dnPrettyNormal: <dc=secure-mail,dc=belgacom>
=> ldap_bv2dn(dc=secure-mail,dc=belgacom,0) <= ldap_bv2dn(dc=secure-mail,dc=belgacom)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=secure-mail,dc=belgacom)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=secure-mail,dc=belgacom)=0 <<< dnPrettyNormal: <dc=secure-mail,dc=belgacom>, <dc=secure-mail,dc=belgacom> SRCH "dc=secure-mail,dc=belgacom" 0 0 0 0 0 begin get_filter PRESENT ber_scanf fmt (m) ber: ber_dump: buf=0x7fc7f80008c0 ptr=0x7fc7f80008f0 end=0x7fc7f8000981 len=145 0000: 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 30 06 04 ..objectclass0.. 0010: 01 2a 04 01 2b a0 7a 30 5a 04 18 31 2e 33 2e 36 .*..+.z0Z..1.3.6 0020: 2e 31 2e 34 2e 31 2e 34 32 30 33 2e 31 2e 39 2e .1.4.1.4203.1.9. 0030: 31 2e 31 04 3e 30 3c 0a 01 03 04 34 72 69 64 3d 1.1.>0<....4rid= 0040: 31 30 30 2c 63 73 6e 3d 32 30 31 33 30 33 32 32 100,csn=20130322 0050: 31 34 35 39 30 33 2e 38 31 36 30 39 36 5a 23 30 145903.816096Z#0 0060: 30 30 30 30 30 23 30 30 30 23 30 30 30 30 30 30 00000#000#000000 0070: 01 01 ff 30 1c 04 17 32 2e 31 36 2e 38 34 30 2e ...0...2.16.840. 0080: 31 2e 31 31 33 37 33 30 2e 33 2e 34 2e 32 01 01 1.113730.3.4.2.. 0090: ff . end get_filter 0 filter: (objectClass=*) ber_scanf fmt ({M}}) ber: ber_dump: buf=0x7fc7f80008c0 ptr=0x7fc7f80008fd end=0x7fc7f8000981 len=132 0000: 00 06 04 01 2a 04 01 2b a0 7a 30 5a 04 18 31 2e ....*..+.z0Z..1. 0010: 33 2e 36 2e 31 2e 34 2e 31 2e 34 32 30 33 2e 31 3.6.1.4.1.4203.1 0020: 2e 39 2e 31 2e 31 04 3e 30 3c 0a 01 03 04 34 72 .9.1.1.>0<....4r 0030: 69 64 3d 31 30 30 2c 63 73 6e 3d 32 30 31 33 30 id=100,csn=20130 0040: 33 32 32 31 34 35 39 30 33 2e 38 31 36 30 39 36 322145903.816096 0050: 5a 23 30 30 30 30 30 30 23 30 30 30 23 30 30 30 Z#000000#000#000 0060: 30 30 30 01 01 ff 30 1c 04 17 32 2e 31 36 2e 38 000...0...2.16.8 0070: 34 30 2e 31 2e 31 31 33 37 33 30 2e 33 2e 34 2e 40.1.113730.3.4. 0080: 32 01 01 ff 2... => get_ctrls ber_scanf fmt ({m) ber: ber_dump: buf=0x7fc7f80008c0 ptr=0x7fc7f8000907 end=0x7fc7f8000981 len=122 0000: 30 5a 04 18 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 0Z..1.3.6.1.4.1. 0010: 34 32 30 33 2e 31 2e 39 2e 31 2e 31 04 3e 30 3c 4203.1.9.1.1.>0< 0020: 0a 01 03 04 34 72 69 64 3d 31 30 30 2c 63 73 6e ....4rid=100,csn 0030: 3d 32 30 31 33 30 33 32 32 31 34 35 39 30 33 2e =20130322145903. 0040: 38 31 36 30 39 36 5a 23 30 30 30 30 30 30 23 30 816096Z#000000#0 0050: 30 30 23 30 30 30 30 30 30 01 01 ff 30 1c 04 17 00#000000...0... 0060: 32 2e 31 36 2e 38 34 30 2e 31 2e 31 31 33 37 33 2.16.840.1.11373 0070: 30 2e 33 2e 34 2e 32 01 01 ff 0.3.4.2... ber_scanf fmt (m) ber: ber_dump: buf=0x7fc7f80008c0 ptr=0x7fc7f8000923 end=0x7fc7f8000981 len=94 0000: 00 3e 30 3c 0a 01 03 04 34 72 69 64 3d 31 30 30 .>0<....4rid=100 0010: 2c 63 73 6e 3d 32 30 31 33 30 33 32 32 31 34 35 ,csn=20130322145 0020: 39 30 33 2e 38 31 36 30 39 36 5a 23 30 30 30 30 903.816096Z#0000 0030: 30 30 23 30 30 30 23 30 30 30 30 30 30 01 01 ff 00#000#000000... 0040: 30 1c 04 17 32 2e 31 36 2e 38 34 30 2e 31 2e 31 0...2.16.840.1.1 0050: 31 33 37 33 30 2e 33 2e 34 2e 32 01 01 ff 13730.3.4.2... => get_ctrls: oid="1.3.6.1.4.1.4203.1.9.1.1" (noncritical) ber_scanf fmt ({i) ber: ber_dump: buf=0x7fc7f8000925 ptr=0x7fc7f8000925 end=0x7fc7f8000963 len=62 0000: 30 3c 0a 01 03 04 34 72 69 64 3d 31 30 30 2c 63 0<....4rid=100,c 0010: 73 6e 3d 32 30 31 33 30 33 32 32 31 34 35 39 30 sn=2013032214590 0020: 33 2e 38 31 36 30 39 36 5a 23 30 30 30 30 30 30 3.816096Z#000000 0030: 23 30 30 30 23 30 30 30 30 30 30 01 01 ff #000#000000... ber_scanf fmt (m) ber: ber_dump: buf=0x7fc7f8000925 ptr=0x7fc7f800092a end=0x7fc7f8000963 len=57 0000: 04 34 72 69 64 3d 31 30 30 2c 63 73 6e 3d 32 30 .4rid=100,csn=20 0010: 31 33 30 33 32 32 31 34 35 39 30 33 2e 38 31 36 130322145903.816 0020: 30 39 36 5a 23 30 30 30 30 30 30 23 30 30 30 23 096Z#000000#000# 0030: 30 30 30 30 30 30 01 01 ff 000000... ber_scanf fmt (b) ber: ber_dump: buf=0x7fc7f8000925 ptr=0x7fc7f8000960 end=0x7fc7f8000963 len=3 0000: 00 01 ff ... ber_scanf fmt (}) ber: ber_dump: buf=0x7fc7f8000925 ptr=0x7fc7f8000963 end=0x7fc7f8000963 len=0 daemon: activity on:ber_scanf fmt ({m) ber: ber_dump: buf=0x7fc7f80008c0 ptr=0x7fc7f8000963 end=0x7fc7f8000981 len=30 0000: 00 1c 04 17 32 2e 31 36 2e 38 34 30 2e 31 2e 31 ....2.16.840.1.1 0010: 31 33 37 33 30 2e 33 2e 34 2e 32 01 01 ff 13730.3.4.2... ber_scanf fmt (b) ber: ber_dump: buf=0x7fc7f80008c0 ptr=0x7fc7f800097e end=0x7fc7f8000981 len=3 0000: 00 01 ff ... => get_ctrls: oid="2.16.840.1.113730.3.4.2" (critical) <= get_ctrls: n=2 rc=0 err="" attrs: * + conn=1000 op=1 SRCH base="dc=secure-mail,dc=belgacom" scope=0 deref=0 filter="(objectClass=*)" conn=1000 op=1 SRCH attr=* + daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL ==> limits_get: conn=1000 op=1 self="cn=replica,dc=secure-mail,dc=belgacom" this="dc=secure-mail,dc=belgacom" => bdb_search bdb_dn2entry("dc=secure-mail,dc=belgacom") => access_allowed: search access to "dc=secure-mail,dc=belgacom" "entry" requested => acl_get: [2] attr entry => acl_mask: access to entry "dc=secure-mail,dc=belgacom", attr "entry" requested => acl_mask: to all values by "cn=replica,dc=secure-mail,dc=belgacom", (=0) <= check a_dn_pat: cn=admin,dc=secure-mail,dc=belgacom <= check a_dn_pat: cn=replica,dc=secure-mail,dc=belgacom <= acl_mask: [2] applying write(=wrscxd) (stop) <= acl_mask: [2] mask: write(=wrscxd) => slap_access_allowed: search access granted by write(=wrscxd) => access_allowed: search access granted by write(=wrscxd) base_candidates: base: "dc=secure-mail,dc=belgacom" (0x00000001) => test_filter PRESENT => access_allowed: search access to "dc=secure-mail,dc=belgacom" "objectClass" requested => acl_get: [2] attr objectClass => acl_mask: access to entry "dc=secure-mail,dc=belgacom", attr "objectClass" requested => acl_mask: to all values by "cn=replica,dc=secure-mail,dc=belgacom", (=0) <= check a_dn_pat: cn=admin,dc=secure-mail,dc=belgacom <= check a_dn_pat: cn=replica,dc=secure-mail,dc=belgacom <= acl_mask: [2] applying write(=wrscxd) (stop) <= acl_mask: [2] mask: write(=wrscxd) => slap_access_allowed: search access granted by write(=wrscxd) => access_allowed: search access granted by write(=wrscxd) <= test_filter 6 send_ldap_result: conn=1000 op=1 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_result: conn=1000 op=1 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_intermediate: err=0 oid=1.3.6.1.4.1.4203.1.9.1.4 len=2 send_ldap_response: msgid=2 tag=121 err=0 ber_flush2: 37 bytes to sd 12 0000: 30 23 02 01 02 79 1e 80 18 31 2e 33 2e 36 2e 31 0#...y...1.3.6.1 0010: 2e 34 2e 31 2e 34 32 30 33 2e 31 2e 39 2e 31 2e .4.1.4203.1.9.1. 0020: 34 81 02 a1 00 4.... ldap_write: want=37, written=37 0000: 30 23 02 01 02 79 1e 80 18 31 2e 33 2e 36 2e 31 0#...y...1.3.6.1 0010: 2e 34 2e 31 2e 34 32 30 33 2e 31 2e 39 2e 31 2e .4.1.4203.1.9.1. 0020: 34 81 02 a1 00 4.... conn=1000 op=1 INTERM oid=1.3.6.1.4.1.4203.1.9.1.4
Here is the consumer config.
[id828684@hmslogbnc4 slapd.d]$ more cn=config.ldif dn: cn=config objectClass: olcGlobal cn: config olcConfigFile: /etc/schema/schema_convert.conf olcConfigDir: /etc/openldap/slap.d olcArgsFile: /var/run/openldap/slapd.args olcAttributeOptions: lang- olcAuthzPolicy: none olcConcurrency: 0 olcConnMaxPending: 100 olcConnMaxPendingAuth: 1000 olcGentleHUP: FALSE olcIdleTimeout: 0 olcIndexSubstrIfMaxLen: 4 olcIndexSubstrIfMinLen: 2 olcIndexSubstrAnyLen: 4 olcIndexSubstrAnyStep: 2 olcIndexIntLen: 4 olcLocalSSF: 71 olcPidFile: /var/run/openldap/slapd.pid olcReadOnly: FALSE olcReverseLookup: FALSE olcSaslSecProps: noplain,noanonymous olcSizeLimit: unlimited olcSockbufMaxIncoming: 262143 olcSockbufMaxIncomingAuth: 16777215 olcThreads: 16 olcTLSVerifyClient: never olcToolThreads: 1 olcWriteTimeout: 0
[id828684@hmslogbnc4 cn=config]$ more olcDatabase={2}bdb.ldif dn: olcDatabase={2}bdb objectClass: olcDatabaseConfig objectClass: olcBdbConfig olcDatabase: {2}bdb olcSuffix: dc=secure-mail,dc=belgacom olcAccess: {0}to * by dn.base="cn=admin,dc=secure-mail,dc=belgacom" write by dn.base="cn=replica,dc=secure-mail,dc=belgacom" read by users read by anonymous read olcAddContentAcl: FALSE olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootDN: cn=admin,dc=secure-mail,dc=belgacom olcRootPW:: dGVzdA== olcSyncUseSubentry: FALSE olcSyncrepl: rid=100 provider=ldap://hmslogbnc3.bc:389 bindmethod=simple timeout=0 network-timeout=0 binddn="cn=replica,dc=secure-mail,dc=belgacom" credentials="r3plica" keepalive=0:0:0 searchbase= "dc=secure-mail,dc=belgacom" scope=base attrs="*,+" schemachecking=on type=refreshAndPersist interval=00:00:01:00 retry="5 5 300 +" syncdata=default olcMirrorMode: FALSE olcMonitoring: TRUE olcDbDirectory: /home/hmslog/data/ldap olcDbCacheSize: 20000 olcDbNoSync: FALSE olcDbDirtyRead: FALSE olcDbIDLcacheSize: 20000 olcDbIndex: objectClass eq olcDbIndex: finalDestination eq,sub olcDbIndex: dc eq,approx,sub olcDbIndex: srcIP eq,approx,sub olcDbIndex: customerId eq olcDbIndex: policy eq olcDbIndex: entryCSN,entryUUID eq olcDbLinearIndex: FALSE olcDbMode: 0600 olcDbSearchStack: 16 olcDbShmKey: 0 olcDbCacheFree: 1 olcDbDNcacheSize: 0
Any help will be appreciated.
Thanks
Regards KM HASHIM,